Sherry Rogers, SNS Intrusion Detection wrote:
John,
Thank you for the pointers! What Utin describes sounds more compatible with our needs. We are a small group with specific skills, i.e. Perl, Postgres, and we not much interested in GUI interfaces than in being to mine the database programatically for correlations with our IDS and other network information (already in posrgres).
Then you might want to take a look at http://hvdkooij.xs4all.nl/NessusFAQ/index.php?action=artikel&cat=8&id=42&artlang=en
The NESSUS_SQL branch (in CVS) provides both scripts for database integration and integration code within the Nessus server (working only for MySQL, however, PostgreSQL code is there but it is not up-to-date and does not work properly).
But thanks, and let me know of any other sources of interest. I meant to
ask this in my first note, BTW - is there a standard database schema for a
nessus database?
The standard schema we developed a way back is part of the documentation in the CVS NESSUS_SQL branch:
http://cgi.nessus.org/cgi-bin/cvsweb.cgi/nessus-core/doc/database/?hideattic=0&only_with_tag=NESSUS_SQL#dirlist
There seems to have been a project group working on this but its current status isn't clear to me.
The current status is that the group is no longer active, the nessus-extract scripts work, the MySQL code works (and is used by some people in production environments), and the documentation is complete. There is no work being done in PostgreSQL integration (although the foundation is there and could be developed easily).
Regards
Javier _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
